CVE-2025-52756: RCE in WP Last Modified Info

The primary impact of CVE-2025-52756 is the ability for an attacker to execute arbitrary code on a WordPress-powered website. Successful exploitation allows for Remote Code Inclusion (RCI), effectively granting the attacker control over the server's execution environment. This can lead to data breaches, website defacement, malware installation, and potentially, lateral movement within the network if the web server has access to other resources. The Code Injection nature of the vulnerability suggests a relatively straightforward exploitation path, potentially making it attractive to a wide range of attackers.

1. Reserved2025-06-19
2. Published2025-10-22
3. Modified2026-04-28
4. EPSS updated2026-03-23

The most effective mitigation for CVE-2025-52756 is to immediately upgrade the WP Last Modified Info plugin to version 1.9.5 or later. If upgrading is not immediately feasible due to compatibility issues or testing requirements, consider temporarily disabling the plugin. As a secondary measure, implement strict file access controls on the WordPress server to limit the attacker's ability to upload and execute malicious code. Web Application Firewall (WAF) rules can be configured to detect and block attempts to include external files, although this is not a substitute for patching. After upgrading, verify the fix by attempting to access the plugin's functionality and confirming that no unexpected code execution occurs.

Active installs

40KKnown

Plugin rating